Commit Graph

  • d0f9d80c3a Harden race fan-out and fix lint Viktor Liu 2026-04-23 15:09:11 +02:00
  • c07c726ea7 [proxy] Set session cookie path to root (#5915) alsruf36 2026-04-24 01:20:54 +09:00
  • 381858a865 add accountID to test data pascal 2026-04-23 17:53:04 +02:00
  • 4051af499a fix error response pascal 2026-04-23 16:29:43 +02:00
  • d774e9a62a Merge branch 'main' into refactor/permissions-manager pascal 2026-04-23 16:06:01 +02:00
  • fa0d58d093 [management] exclude peers for expiration job that have already been marked expired (#5970) Pascal Fischer 2026-04-23 16:01:54 +02:00
  • 37b9905b68 Merge branch 'main' into feature/log-most-busy-peers feature/log-most-busy-peers pascal 2026-04-23 15:41:26 +02:00
  • b6038e8acd [management] refactor: changeable pat rate limiting (#5946) Vlad 2026-04-23 15:13:22 +02:00
  • d185b68fe1 resellers customer id field crn4 2026-04-23 14:32:20 +02:00
  • c102592735 [client] Drop DNS probes for passive health projection Viktor Liu 2026-04-23 06:39:16 +02:00
  • 617ceab2e3 Add OnPeerConnectedWithPeer to optimize sync fast path operations mlsmaycon 2026-04-22 22:40:31 +02:00
  • 5da05ecca6 [client] increase gRPC health check timeout to 5s (#5961) Zoltan Papp 2026-04-22 20:54:18 +02:00
  • 9ae1ca1c8e [client/uiwails] Windows cross-build support and notification actions prototype/ui-wails Zoltán Papp 2026-04-22 16:53:40 +02:00
  • 801de8c68d [client] Add TTL-based refresh to mgmt DNS cache via handler chain (#5945) Viktor Liu 2026-04-22 22:10:14 +09:00
  • 53deabbdb4 Add timing log for GetExtraSettings in sync fast path mlsmaycon 2026-04-22 15:00:21 +02:00
  • ac3fe4343b Refactor sync fast path logging for improved clarity and timing accuracy mlsmaycon 2026-04-22 14:24:52 +02:00
  • a4ae160993 Fix deferred logging function in commitFastPath for correct execution mlsmaycon 2026-04-22 11:41:32 +02:00
  • a822a33240 [self-hosted] Use cscli lapi status for CrowdSec readiness in installer (#5949) Viktor Liu 2026-04-22 17:35:22 +09:00
  • 3ac4263257 Add timing instrumentation for sync fast path functions mlsmaycon 2026-04-22 01:23:44 +02:00
  • dc86c9655d Improve timing precision in sync fast path logging mlsmaycon 2026-04-22 00:39:09 +02:00
  • 66494d61af Replace Tracef with Debugf for sync fast path logging mlsmaycon 2026-04-22 00:06:39 +02:00
  • 46446acd30 Add detailed timing logs to sync fast path operations mlsmaycon 2026-04-21 23:02:58 +02:00
  • 57b23c5b25 [management] Propagate context changes to upstream middleware (#5956) Bethuel Mmbaga 2026-04-21 23:06:52 +03:00
  • 1165058fad [client] fix port collision in TestUpload (#5950) Zoltan Papp 2026-04-21 19:07:20 +02:00
  • 703353d354 [flow] fix goroutine leak in TestReceive_ProtocolErrorStreamReconnect (#5951) Zoltan Papp 2026-04-21 19:06:47 +02:00
  • 2fb50aef6b [client] allow UDP packet loss in TestICEBind_HandlesConcurrentMixedTraffic (#5953) Zoltan Papp 2026-04-21 19:05:58 +02:00
  • eb3aa96257 [management] check policy for changes before actual db update (#5405) Vlad 2026-04-21 18:37:04 +02:00
  • 92e53d6319 generic settings overrider pascal 2026-04-21 18:31:53 +02:00
  • 064ec1c832 [client] Trust wg interface in firewalld to bypass owner-flagged chains (#5928) Viktor Liu 2026-04-22 00:57:16 +09:00
  • 75e408f51c [client] Prefer systemd-resolved stub over file mode regardless of resolv.conf header (#5935) Viktor Liu 2026-04-22 00:56:56 +09:00
  • 3eb1298cb4 Refactor sync fast path tests and fix CI flakiness mlsmaycon 2026-04-21 17:07:31 +02:00
  • 93391fc68f generate only current.bin and android_current.bin on ci/cd mlsmaycon 2026-04-21 16:49:08 +02:00
  • 48c080b861 Replace Redis dependency with a generic cache store for fast path flag handling mlsmaycon 2026-04-21 16:28:24 +02:00
  • 3716838c25 Remove unused cacheKey helper and testcontainers imports, simplify Redis container setup mlsmaycon 2026-04-21 16:17:31 +02:00
  • 5d58000dbd Merge branch 'main' into cached-serial-check-on-sync mlsmaycon 2026-04-21 15:55:47 +02:00
  • 8430b06f2a [management] Add Redis-backed kill switch for Sync fast path mlsmaycon 2026-04-21 15:52:34 +02:00
  • 5a89e6621b [client] Supress ICE signaling (#5820) Zoltan Papp 2026-04-21 15:52:08 +02:00
  • 8a7d78ddf3 make configurable via env pascal 2026-04-21 15:42:44 +02:00
  • ea83cbf917 log the most busy peers pascal 2026-04-21 15:27:05 +02:00
  • 06dfa9d4a5 [management] replace mailru/easyjson with netbirdio/easyjson fork (#5938) Misha Bragin 2026-04-21 13:59:35 +02:00
  • 45d9ee52c0 [self-hosted] add reverse proxy retention fields to combined YAML (#5930) Misha Bragin 2026-04-21 10:21:11 +02:00
  • a4b55af99c add additional integration tests pascal 2026-04-20 17:24:04 +02:00
  • 470307079b update account isolation pascal 2026-04-20 16:33:24 +02:00
  • 0b04c0d03b leave todo comments pascal 2026-04-20 15:03:31 +02:00
  • bed8d89d9f account for peers permission on the groups endpoint pascal 2026-04-20 14:00:57 +02:00
  • b65a8bcb9c update sql test data files and auth wrappers pascal 2026-04-20 13:44:38 +02:00
  • 3098f48b25 [client] fix ios network addresses mac filter (#5906) v0.69.0 Zoltan Papp 2026-04-20 11:49:38 +02:00
  • 7f023ce801 [client] Android debug bundle support (#5888) Zoltan Papp 2026-04-20 11:26:30 +02:00
  • e361126515 [client] Fix WGIface.Close deadlock when DNS filter hook re-enters GetDevice (#5916) Michael Uray 2026-04-20 10:36:19 +02:00
  • 95213f7157 [client] Use Match host+exec instead of Host+Match in SSH client config (#5903) Viktor Liu 2026-04-20 17:24:11 +09:00
  • 2e0e3a3601 [client] Replace exclusion routes with scoped default + IP_BOUND_IF on macOS (#5918) Viktor Liu 2026-04-20 17:01:01 +09:00
  • cb1eaf9e0d CodeRabbit Generated Unit Tests: Add unit tests for PR changes coderabbitai/utg/8ae8f20 coderabbitai[bot] 2026-04-20 07:51:24 +00:00
  • 5a8dbef89b extract peer host method feature/use-peer-fqdn-on-https pascal 2026-04-17 18:43:06 +02:00
  • 569ebb400b fix error handling pascal 2026-04-17 18:35:42 +02:00
  • 8ec17daf3a fix testing tools pascal 2026-04-17 18:23:06 +02:00
  • 8bccbf9304 use peer fqdn on https pascal 2026-04-17 18:10:05 +02:00
  • a53c38a6ed add sql test files pascal 2026-04-17 17:09:38 +02:00
  • 8a41117403 fix version test pascal 2026-04-17 16:51:08 +02:00
  • e0063731f2 update tests pascal 2026-04-17 16:44:57 +02:00
  • 3f4ef0031b [management] Skip full network map on Sync when peer state is unchanged mlsmaycon 2026-04-17 16:20:04 +02:00
  • a572d8819f fix user handler test pascal 2026-04-17 14:59:19 +02:00
  • d139a4fc42 fix client cmd test pascal 2026-04-17 14:34:39 +02:00
  • dbe533327f fix client server test pascal 2026-04-17 13:23:26 +02:00
  • 4835909a04 fix client test pascal 2026-04-17 13:16:33 +02:00
  • 8ae8f2098f [management] chores: fix lint error on google workspace (#5907) Nicolas Frati 2026-04-16 20:02:09 +02:00
  • fb6447e714 fix engine test pascal 2026-04-16 18:44:40 +02:00
  • 16d6cc1265 update management integrations pascal 2026-04-16 18:36:55 +02:00
  • 53e47da7bd fix tests pascal 2026-04-16 18:24:47 +02:00
  • ce522ea69b fix mock pascal 2026-04-16 18:16:44 +02:00
  • a39787d679 [infrastructure] Add CrowdSec LAPI container to self-hosted setup script (#5880) Viktor Liu 2026-04-17 01:06:38 +09:00
  • 5be80e976f fix mock pascal 2026-04-16 17:55:14 +02:00
  • dd9539a9bf fix gomod pascal 2026-04-16 17:48:11 +02:00
  • 8530f9b8fc Merge branch 'main' into refactor/permissions-manager pascal 2026-04-16 17:47:30 +02:00
  • 9406de9610 add exception handler and add exception for users pascal 2026-04-16 17:42:59 +02:00
  • 9e385eb540 add optional auth error handlers pascal 2026-04-16 16:24:55 +02:00
  • 53b04e512a [management] Reuse a single cache store across all management server consumers (#5889) Maycon Santos 2026-04-16 16:04:53 +02:00
  • 633dde8d1f [client] Reconnect conntrack netlink listener on error (#5885) Viktor Liu 2026-04-16 22:30:36 +09:00
  • e46ea895c1 Merge branch 'main' into refactor/permissions-manager pascal 2026-04-16 14:52:46 +02:00
  • 7e4542adde fix(client): populate NetworkAddresses on iOS for posture checks (#5900) Michael Uray 2026-04-16 14:25:55 +02:00
  • d4c61ed38b [client] Add mangle FORWARD guard to prevent Docker DNAT bypass of ACL rules (#5697) Viktor Liu 2026-04-16 21:02:52 +09:00
  • 6b540d145c [client] Add --disable-networks flag to block network selection (#5896) Viktor Liu 2026-04-16 21:02:31 +09:00
  • 08f624507d [management] Enforce peer or peer groups requirement for network routers (#5894) Bethuel Mmbaga 2026-04-16 13:12:19 +03:00
  • 95bc01e48f [client] Allow clearing saved service env vars with --service-env "" (#5893) Viktor Liu 2026-04-16 02:22:08 +09:00
  • 0d86de47df [client] Add PCP support (#5219) Viktor Liu 2026-04-15 18:43:16 +09:00
  • e804a705b7 [infrastructure] Update sign pipeline version to v0.1.2 (#5884) Viktor Liu 2026-04-15 00:08:35 +09:00
  • 46fc8c9f65 [proxy] direct redirect to SSO (#5874) Pascal Fischer 2026-04-14 13:47:02 +02:00
  • d7ad908962 [misc] Add CI check for proto version string changes (#5854) Viktor Liu 2026-04-14 20:36:26 +09:00
  • 3dd34c920e [management] add context cancel monitoring (#5879) v0.68.3 release/0.68.3 Pascal Fischer 2026-04-14 12:49:18 +02:00
  • 7989bbff3b [management] revert ctx dependency in get account with backpressure (#5878) Vlad 2026-04-14 12:16:03 +02:00
  • c5623307cc [management] add context cancel monitoring (#5879) Pascal Fischer 2026-04-14 12:49:18 +02:00
  • 7f666b8022 [management] revert ctx dependency in get account with backpressure (#5878) Vlad 2026-04-14 12:16:03 +02:00
  • 0a30b9b275 [management, proxy] Add CrowdSec IP reputation integration for reverse proxy (#5722) Viktor Liu 2026-04-14 19:14:58 +09:00
  • 91a6577182 Add support for Slack as a notification channel type add-slack-channel bcmmbaga 2026-04-13 17:39:32 +03:00
  • 4eed459f27 [client] Fix DNS resolution with userspace WireGuard and kernel firewall (#5873) v0.68.2 Viktor Liu 2026-04-13 23:23:57 +09:00
  • 13539543af [client] Fix/grpc retry (#5750) Zoltan Papp 2026-04-13 10:42:24 +02:00
  • 7483fec048 Fix Android internet blackhole caused by stale route re-injection on TUN rebuild (#5865) Zoltan Papp 2026-04-13 09:38:38 +02:00
  • b621a2628b [client] Use port 22338 for RDP sideband auth server claude/rdp-token-passthrough-eNcqW Claude 2026-04-11 18:21:22 +00:00
  • 4949ca6194 [client] Add opt-in --allow-server-rdp flag, reuse SSH ACL, dynamic DLL registration Claude 2026-04-11 17:48:53 +00:00
  • c5186f1483 [client] Add RDP token passthrough for passwordless Windows Remote Desktop Claude 2026-04-11 17:15:42 +00:00
  • afbddae472 Add transparent proxy inspection engine with envoy sidecar support transparent-proxy Viktor Liu 2026-04-11 18:07:46 +02:00